The correct way is to give right to anyone edit/delete their own messages.
And moderator/administrator to edit/delete all by logging.